您好,登錄后才能下訂單哦!
客戶問題概括:
用戶反饋在域中一臺Win 2003 SP2 服務器使用 Powershell ,“enter-pssession” 鏈接到另外一臺服務器無法工作,該服務器無其他問題.
報錯內容:
WSManFault
Message = WinRM cannot process the request. The following error occured while using Negotiate authentication: An unknown security error occurred.
Possible causes are:
-The user name or password specified are invalid.
-Kerberos is used when no authentication method and no user name are specified.
-Kerberos accepts domain user names, but not local user names.
-The Service Principal Name (SPN) for the remote computer name and port does not exist.
-The client and remote computers are in different domains and there is no trust between the two domains.
After checking for the above issues, try the following:
-Check the Event Viewer for events related to authentication.
-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use
HTTPS transport.
Note that computers in the TrustedHosts list might not be authenticated.
-For more information about WinRM configuration, run the following command: winrm help config.
解決方法:
排查安全日志發現此服務器SPN注冊有問題,重新注冊spn后即可, 注冊spn工具為setspn.exe
舉例:
setspn -l HTTP/Servername 確認SPN
setspn -q HTTP/Servername.fqdn
發現重復SPN
setspn -x刪除重復spn
免責聲明:本站發布的內容(圖片、視頻和文字)以原創、轉載和分享為主,文章觀點不代表本網站立場,如果涉及侵權請聯系站長郵箱:is@yisu.com進行舉報,并提供相關證據,一經查實,將立刻刪除涉嫌侵權內容。